in fact I did, I just dont't know how to set the platform toolset, I can't find the configuration items:and these are the warning and error:~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~warning LINK : warning LNK4098: defaultlib 'LIBCMT' conflicts with use of other libs; use /NODEFAULTLIB:libraryError LINK : fatal error LNK1123: failure during conversion to COFF: file invalid or corrupt~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Could you give me some details about this information and how to deal with them?thanks!

- Could you Rename ">AUTOHOTKEY SCRIPT<", "AUTOHOTKEY.DLL" and "AUTOHOTKEYMINI.DLL" to something that's hard to recognize? (e. system.dll, ...)> It`s harder to get the source doe, if an attacker don't now, what language is used.

- Bug in your 1.1.22.4 Unicode 32Bit (others not testet) ahk2exe.exe: If i embed a file greater than 50 MB with Fileinstall, the compiler breaks. The compiler of ahk_L is working, but misses the powerful encryption. Could you please fix that?

Dev for a better world > PHP for Web > AHK H for Local > with KISS (Keep it Short and Simple) on Win 10 Pro (Version 1709) x64

- Could you Rename ">AUTOHOTKEY SCRIPT<", "AUTOHOTKEY.DLL" and "AUTOHOTKEYMINI.DLL" to something that's hard to recognize? (e. system.dll, ...)> It`s harder to get the source doe, if an attacker don't now, what language is used.

- Bug in your 1.1.22.4 Unicode 32Bit (others not testet) ahk2exe.exe: If i embed a file greater than 50 MB with Fileinstall, the compiler breaks. The compiler of ahk_L is working, but misses the powerful encryption. Could you please fix that?

I like the idea, so I implemented it for v1.1 and v2.0 as well as Compiler.It is now a GUID number instead of >AUTOHOTKEY SCRIPT<, same for AutoHotkey[MINI].dll and WINAPI.The bug for FileInstall is fixed as well, now UnZipRawMemory requires size parameter, see UnZipRawMemory.

At the moment i am using ahk L to deploy a software together with the msvcr100.dll and ahk h to run the programs. It would be great, if the installer is also source code protected and i only need ahk h for everything, because ahk h is definitely the better ahk.In my opinion, you don't need the ansi-version anymore, because there won't be any in ahk v2. That could spare some time.

Dev for a better world > PHP for Web > AHK H for Local > with KISS (Keep it Short and Simple) on Win 10 Pro (Version 1709) x64

mobius wrote:To those that don't wish to recompile the builder to change the password simply patch the static string in the standalone builder (a temporary version ofc)

Limitation of this however is that the new password must be of equal or lesser length than the hardcoded password but still doable.

Vlad

how do we 'patch' it? what do you mean by that?

i tried opening win32w\AutoHotkeySC.bin file with hexeditor and searching for "AutoHotkey" which is the pw that HotKeyIt said, but I only found 3 occurances and none looked right

What I meant by patching is a byte for byte replacement of a hardcoded string within the binary, so your hex editor was indeed the right tool for the task, don't have a hex editor on my phone so can't tell you to look for an ansi or unicode string.

It is my understanding that the builder itself is written in ahk so it is AutoHotkey.exe (optionally after renaming it to ahk2exe) that you need to patch not AutoHotkeySC.bin (It might well be hardcoded within the interpreter also).

HotKeyIt wrote:Afaik you can't simply change that, it is not a static string that is assigned.

My bad then.

Afaik? You don't know? Didn't you say to users that recompilation after changing the password string is necessary, so what happens to that string during the vs 2010 build process, it must still exist statically for reference purposes?

Or perhaps not, maybe I have jumped the gun a little.

If I may be so bold, are any of the algorithmic components part of the true compile (by that I mean vc 2010 not ahk) or are these components written in ahk?

I don't know a simple way. As said, it is not a string but individual characters assigned to variables. You could probably locate them when there were no optimization options for compiler but I have no idea what compiler does when it optimizes code and I am quite sure it is not simple to find them, but who knows.

EDIT:There are no algorithmic components, script is zipped using LiteZip (AHK_H uses parts of LiteUnzip to unzip the data) and encrypted using Crypt API.